Privacy Notice

Webdinh may receive information that you choose to provide, including:

• company name and website URL;
• industry and principal products or services;
• target customer groups;
• current issues, objectives, and marketing channels;
• contact name;
• email address, telephone number, or Zalo account used for contact;
• notes and materials that you choose to send.

Data is received directly from information you submit through the website, by email, or through a contact channel that you choose to use. When carrying out a Mini Check, Webdinh may read information lawfully made public on the website you provide in order to understand the context. Webdinh does not treat public information as consent to unrelated marketing activity.

Some information about a business may also be personal data if it relates to, or helps identify, a particular individual.

Webdinh processes data only to the extent necessary to:

• receive and manage a request you have submitted;
• understand the business and website context;
• carry out a Mini Check review;
• identify priority issues and prepare a human-reviewed response;
• contact you manually through a channel you provided when clarification or a response is needed;
• manage a quotation, scope, or project if the parties continue discussions;
• protect systems, handle incidents, and comply with legal obligations;
• produce internal statistics after appropriate de-identification.

Data submitted for a Mini Check is not automatically used to publish information, create a customer case, send bulk marketing, or produce final customer material.

Where consent is requested for a Mini Check, Webdinh processes data only for the purposes presented when the form is submitted. You may withdraw consent through info@webdinh.vn.

Withdrawal does not affect processing lawfully carried out before withdrawal and does not apply to data that Webdinh must continue to process or retain to meet a legal obligation.

Silence or merely visiting the website is not consent to marketing contact.

Submitting a Mini Check only permits Webdinh to receive, review, and respond to the request submitted. Consent to a Mini Check is not consent to newsletters, advertising, or recurring marketing activity.

If Webdinh introduces marketing contact in the future, that purpose must have a separate consent choice, must not be selected by default, and must provide an easily accessible withdrawal mechanism.

Mini Check information is received through Vercel website infrastructure and server functions, then stored and managed in Google Workspace/Google Sheets so that Webdinh can receive, review, and respond to the request.

To the extent that these providers process data on Webdinh's instructions, they act as processors or subprocessors under the applicable service terms. Webdinh determines the processing purposes, access scope, and retention period for Mini Check data.

Because Vercel and Google infrastructure operates internationally, data may be transferred to, processed in, or stored in countries or territories outside Vietnam. Webdinh does not promise that data is stored only in Vietnam. Cross-border data transfers must be limited to the stated purposes, managed with appropriate access measures, and documented as required by applicable law.

Access is limited to people who need to receive, review, respond to, or manage a request. Webdinh applies account permissions, appropriate authentication, sharing restrictions, access reviews, and organizational or technical measures proportionate to the risk.

Do not send passwords, sensitive personal data, customer lists, payment data, or confidential materials through a public form. If unnecessary or high-risk information is sent by mistake, Webdinh may isolate or delete it under the applicable process.

• Mini Check or contact requests that do not become a project: up to 12 months from submission or the last substantive exchange, whichever is later;
• opportunities that reach quotation or scope confirmation but are not signed: up to 24 months from the last substantive exchange or opportunity closure, whichever is later;
• project working data: up to 36 months after acceptance or termination, except data that must be retained under a legal obligation or separate agreement;
• contracts, invoices, payments, accounting, and tax records: for the period required by applicable law;
• standard technical logs: up to 90 days;
• logs directly related to a security incident: up to 12 months after the incident is closed, unless a longer period is legally required;
• operational backups: retained on a rolling basis for up to 30 days;
• browser language selection: up to 12 months after the last update or until you clear browser data.

Automated notifications, internal status changes, or notes that do not represent a substantive exchange must not automatically extend a retention period.

To the extent provided by applicable law, you may request:

• information about data processing;
• access to or receipt of personal data relating to you;
• correction of inaccurate data;
• withdrawal of consent;
• restriction of or objection to processing;
• deletion when the relevant conditions are met;
• a complaint or another right provided by law.

Send requests to info@webdinh.vn and provide the information needed for Webdinh to verify the correct person, submission, and data scope. Webdinh acknowledges receipt of a valid request within 02 business days.

• Requests for access, correction, or provision of personal data are handled within 10 days.
• Requests to withdraw consent, restrict processing, or object to processing are carried out within 15 days.
• Where action by a processor or third party is required, the corresponding period may be 15 or 20 days.

If an extension is permitted under the applicable rules, Webdinh informs the requester of the reason and the new deadline.

Deletion requests are handled subject to applicable law and mandatory retention obligations. Webdinh communicates the outcome or the reason deletion cannot yet be completed. Where deletion cannot yet be completed, data that is no longer needed is separated from marketing and unrelated purposes.

At the end of the applicable period, data is deleted or converted into statistics that no longer identify an individual. Only irreversibly de-identified data may be retained longer for internal measurement.

Data deleted from active systems must not return to routine processing when a backup is restored. Copies within a backup cycle are removed under the applicable rolling schedule.

When Webdinh identifies an incident involving personal data, it assesses the incident, limits the impact, preserves necessary evidence, and notifies the relevant authority or data subject within the scope, content, and period required by applicable law.

To the extent required by applicable law, Webdinh is responsible for creating, retaining, and updating personal data processing impact assessment records and cross-border personal data transfer impact assessment records. The records must accurately reflect the data types, purposes, receiving systems, providers, people with access, retention periods, risks, and controls actually in place.

This notice must not be understood as a statement that a particular internal record has been approved by a public authority or that Webdinh is exempt from a legal obligation.

Personal data requests: info@webdinh.vn

Service feedback or complaints: info@webdinh.vn

Webdinh records the matter, verifies its scope, responds through an appropriate channel, and retains a handling record to the extent necessary.

When data processing changes materially, Webdinh updates the version and effective date and provides notice in an appropriate place on the website. A new version does not automatically extend consent previously given for another purpose.

Submitting a form or receiving an initial review does not promise inquiries, rankings, revenue, orders, or business results.